CVE-2022-22072 : Buffer overflow can occur due to improper validation of NDP application informat

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Published 2022-06-14 10:15:19

Updated 2022-06-22 17:48:46

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2022-22072

Qualcomm » Mdm9206 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9206 » Version: N/A
Qualcomm » Mdm9607 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9607 » Version: N/A
Qualcomm » Mdm9650 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9650 » Version: N/A
Qualcomm » Sdx20 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sdx20 » Version: N/A
Qualcomm » Apq8096au Firmware » Version: N/A
cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Apq8096au » Version: N/A
Qualcomm » Msm8937 Firmware » Version: N/A
cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Msm8937 » Version: N/A
Qualcomm » Qca6174a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6174a » Version: N/A
Qualcomm » Qca6574au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574au » Version: N/A
Qualcomm » Qca9377 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca9377 » Version: N/A
Qualcomm » Qca9379 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca9379 » Version: N/A
Qualcomm » Qca6574 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574 » Version: N/A
Qualcomm » Sd820 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd820 » Version: N/A
Qualcomm » Sd835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd835 » Version: N/A
Qualcomm » Sd845 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd845_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd845 » Version: N/A
Qualcomm » Sdx24 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sdx24 » Version: N/A
Qualcomm » Mdm9150 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9150 » Version: N/A
Qualcomm » Qcs605 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs605 » Version: N/A
Qualcomm » Qca4020 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca4020_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca4020 » Version: N/A
Qualcomm » Qcs405 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs405 » Version: N/A
Qualcomm » Apq8009 Firmware » Version: N/A
cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Apq8009 » Version: N/A
Qualcomm » Apq8017 Firmware » Version: N/A
cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Apq8017 » Version: N/A
Qualcomm » Apq8053 Firmware » Version: N/A
cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Apq8053 » Version: N/A
Qualcomm » Sa515m Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa515m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa515m » Version: N/A
Qualcomm » Qca6310 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6310 » Version: N/A
Qualcomm » Qca6335 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6335 » Version: N/A
Qualcomm » Wcd9335 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9335 » Version: N/A
Qualcomm » Wcd9340 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9340 » Version: N/A
Qualcomm » Wcd9341 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9341 » Version: N/A
Qualcomm » Wcn3990 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3990 » Version: N/A
Qualcomm » Wcn3998 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3998 » Version: N/A
Qualcomm » Wsa8810 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8810 » Version: N/A
Qualcomm » Wsa8815 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8815 » Version: N/A
Qualcomm » Mdm9250 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9250 » Version: N/A
Qualcomm » Mdm9628 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9628 » Version: N/A
Qualcomm » Wcd9330 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9330 » Version: N/A
Qualcomm » Qcs603 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs603 » Version: N/A
Qualcomm » Ar8031 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ar8031 » Version: N/A
Qualcomm » Csra6620 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csra6620 » Version: N/A
Qualcomm » Csra6640 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csra6640 » Version: N/A
Qualcomm » Mdm9626 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9626_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9626 » Version: N/A
Qualcomm » Pm8937 Firmware » Version: N/A
cpe:2.3:o:qualcomm:pm8937_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Pm8937 » Version: N/A
Qualcomm » Qca6175a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6175a » Version: N/A
Qualcomm » Qca6320 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6320 » Version: N/A
Qualcomm » Qca6564a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6564a » Version: N/A
Qualcomm » Qca6564au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6564au » Version: N/A
Qualcomm » Qca6574a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574a » Version: N/A
Qualcomm » Qca9367 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca9367 » Version: N/A
Qualcomm » Sd670 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd670_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd670 » Version: N/A
Qualcomm » Sd710 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd710_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd710 » Version: N/A
Qualcomm » Sdxr1 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sdxr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sdxr1 » Version: N/A
Qualcomm » Wcd9326 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9326 » Version: N/A
Qualcomm » Wcn3610 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3610 » Version: N/A
Qualcomm » Wcn3615 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3615 » Version: N/A
Qualcomm » Wcn3660b Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3660b » Version: N/A
Qualcomm » Wcn3680b Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3680b » Version: N/A
Qualcomm » Wcn3980 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3980 » Version: N/A
Qualcomm » Wcn3999 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3999_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3999 » Version: N/A
Qualcomm » Sdx12 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sdx12_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sdx12 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-22072

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-22072

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	Qualcomm, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2022-22072

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Qualcomm Documentation
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-22072

Products affected by CVE-2022-22072

Exploit prediction scoring system (EPSS) score for CVE-2022-22072

CVSS scores for CVE-2022-22072

References for CVE-2022-22072